org.keycloak.policy.HistoryPasswordPolicyProvider クラス

org.keycloak.policy.HistoryPasswordPolicyProvider の継承関係図

org.keycloak.policy.HistoryPasswordPolicyProvider 連携図

公開メンバ関数
	HistoryPasswordPolicyProvider (KeycloakSession session)
PolicyError	validate (String username, String password)
PolicyError	validate (RealmModel realm, UserModel user, String password)
Object	parseConfig (String value)
void	close ()

非公開変数類
KeycloakSession	session

静的非公開変数類
static final Logger	logger = Logger.getLogger(HistoryPasswordPolicyProvider.class)
static final String	ERROR_MESSAGE = "invalidPasswordHistoryMessage"

詳解

著者

Stian Thorgersen

構築子と解体子

HistoryPasswordPolicyProvider()

org.keycloak.policy.HistoryPasswordPolicyProvider.HistoryPasswordPolicyProvider ( KeycloakSession  session )

inline

                                                                  {
        this.session = session;
    }

関数詳解

close()

void org.keycloak.policy.HistoryPasswordPolicyProvider.close ( )

inline

                        {
    }

parseConfig()

Object org.keycloak.policy.HistoryPasswordPolicyProvider.parseConfig ( String  value )

inline

                                            {
        return parseInteger(value, HistoryPasswordPolicyProviderFactory.DEFAULT_VALUE);
    }

validate() [1/2]

PolicyError org.keycloak.policy.HistoryPasswordPolicyProvider.validate ( String  username, String  password  )

inline

                                                                  {
        return null;
    }

validate() [2/2]

PolicyError org.keycloak.policy.HistoryPasswordPolicyProvider.validate ( RealmModel  realm, UserModel  user, String  password  )

inline

                                                                                   {
        PasswordPolicy policy = session.getContext().getRealm().getPasswordPolicy();
        int passwordHistoryPolicyValue = policy.getPolicyConfig(PasswordPolicy.PASSWORD_HISTORY_ID);
        if (passwordHistoryPolicyValue != -1) {
            List<CredentialModel> storedPasswords = session.userCredentialManager().getStoredCredentialsByType(realm, user, CredentialModel.PASSWORD);
            for (CredentialModel cred : storedPasswords) {
                PasswordHashProvider hash = session.getProvider(PasswordHashProvider.class, cred.getAlgorithm());
                if (hash == null) continue;
                if (hash.verify(password, cred)) {
                    return new PolicyError(ERROR_MESSAGE, passwordHistoryPolicyValue);
                }
            }
            List<CredentialModel> passwordHistory = session.userCredentialManager().getStoredCredentialsByType(realm, user, CredentialModel.PASSWORD_HISTORY);
            for (CredentialModel cred : passwordHistory) {
                PasswordHashProvider hash = session.getProvider(PasswordHashProvider.class, cred.getAlgorithm());
                if (hash.verify(password, cred)) {
                    return new PolicyError(ERROR_MESSAGE, passwordHistoryPolicyValue);
                }

            }
        }
        return null;
    }

メンバ詳解

ERROR_MESSAGE

final String org.keycloak.policy.HistoryPasswordPolicyProvider.ERROR_MESSAGE = "invalidPasswordHistoryMessage"

staticprivate

logger

final Logger org.keycloak.policy.HistoryPasswordPolicyProvider.logger = Logger.getLogger(HistoryPasswordPolicyProvider.class)

staticprivate

session

KeycloakSession org.keycloak.policy.HistoryPasswordPolicyProvider.session

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/spi-private/src/server-spi-private/src/main/java/org/keycloak/policy/HistoryPasswordPolicyProvider.java